lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: vrification de la validit du mot de passe

Browse Source
This commit is contained in:
Regis Houssin 2008-01-04 21:42:25 +00:00
parent e36abf0578
commit c4aea098ac
1 changed files with 26 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
htdocs/includes/login/functions_ldap.php
View File

@ -107,7 +107,30 @@ function check_user_password_ldap($usertotest,$passwordtotest)
// Code to get user in LDAP (may differ from Dolibarr user) // Code to get user in LDAP (may differ from Dolibarr user)
$result=$ldap->connect_bind(); $result=$ldap->connect_bind();
$resultCheckUserDN = $ldap->checkPass($usertotest,$passwordtotest); if ($result)
{
$ldap->fetch($_POST["username"]);
// On stop si le mot de passe ldap doit etre modifie
if ($ldap->pwdlastset == 0)
{
session_destroy();
dolibarr_syslog('User '.$login.' must change password next logon');
if ($ldapdebug) print "DEBUG: User ".$login." must change password<br>\n";
$ldap->close();
// On repart sur page accueil
session_name($sessionname);
session_start();
$langs->load('ldap');
$_SESSION["dol_loginmesg"]=$langs->trans("UserMustChangePassNextLogon");
header('Location: '.DOL_URL_ROOT.'/index.php');
exit;
}
else
{
$resultCheckUserDN = $ldap->checkPass($usertotest,$passwordtotest);
}
}
$ldap->close(); $ldap->close();
$ldap->searchUser=$usertotest; $ldap->searchUser=$usertotest;
@ -133,7 +156,7 @@ function check_user_password_ldap($usertotest,$passwordtotest)
if ($ldapdebug) print "DEBUG: pwdLastSet = ".dolibarr_print_date($ldap->pwdlastset,'day')."<br>\n"; if ($ldapdebug) print "DEBUG: pwdLastSet = ".dolibarr_print_date($ldap->pwdlastset,'day')."<br>\n";
if ($ldapdebug) print "DEBUG: badPasswordTime = ".dolibarr_print_date($ldap->badpwdtime,'day')."<br>\n"; if ($ldapdebug) print "DEBUG: badPasswordTime = ".dolibarr_print_date($ldap->badpwdtime,'day')."<br>\n";
/*
// On stop si le mot de passe ldap doit etre modifie // On stop si le mot de passe ldap doit etre modifie
if ($ldap->pwdlastset == 0) if ($ldap->pwdlastset == 0)
{ {
@ -150,7 +173,7 @@ function check_user_password_ldap($usertotest,$passwordtotest)
header('Location: '.DOL_URL_ROOT.'/index.php'); header('Location: '.DOL_URL_ROOT.'/index.php');
exit; exit;
} }
*/
// On recherche le user dolibarr en fonction de son SID ldap // On recherche le user dolibarr en fonction de son SID ldap
$sid = $ldap->getObjectSid($login); $sid = $ldap->getObjectSid($login);